open-emr
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 221 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 9, 2012 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration
OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection
OpenEMR Authenticated SQL Injection via backup.php Import Feature
OpenEMR: Stored XSS in prescription CSS/HTML print view via patient demographics
OpenEMR 7.0.1 Authentication Brute Force Mitigation Bypass
OpenEMR has a Privilege Escalation that Allows a Low-Level User to View Admin-Only Data
OpenEMR has IDOR in Patient Notes Web UI allows unauthorized note access/modification
OpenEMR Missing Authorization in Procedure Order AJAX Deletion Handler
OpenEMR has Improper ACL On Import/Export Popup
OpenEMR's Missing Authorization in show-signature.php Allows Portal Patients to Read Staff Signatures
Monitor open-emr in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.